last executing test programs: 12.7129893s ago: executing program 3 (id=884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x5e, 0x40, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x0, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) write(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') read$FUSE(r3, &(0x7f0000005380)={0x2020}, 0x2020) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000003c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r4}}, 0x18) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, "4102000000ff000000000006bbff0f00"}) r5 = syz_open_pts(0xffffffffffffffff, 0x48f00) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[], 0xdc}}, 0x0) sendmsg$inet(r5, 0x0, 0x4004141) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="188099000000000008000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) close(r7) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0xfffffffffffffdd0) mount(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x6f) 11.704900106s ago: executing program 3 (id=885): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf, 0x12}}) read$FUSE(r1, 0x0, 0x0) lseek(r1, 0xfffffffffffffff5, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf7b1caab9a8996d4, 0x0, 0x1, 0x4) read$hiddev(r3, &(0x7f0000000080)=""/102, 0x66) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="13010000000000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r4, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x541b, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x4, 0x42100) ioctl$EVIOCREVOKE(r3, 0x40044591, 0x0) setsockopt(0xffffffffffffffff, 0x4116, 0x7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r6, 0xc01064c7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0a00060008021100000100ff05008a0003"], 0x30}}, 0x0) 10.832390487s ago: executing program 2 (id=887): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) timerfd_create(0x8, 0x800) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) ftruncate(r3, 0x51a9497) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r4, &(0x7f0000000000)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000180)={r6, 0x1, 0x4}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x9}, 0x26) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3) close(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 9.154737328s ago: executing program 2 (id=891): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="bad004b00dee0fe7390fc7be08003e0f18240f20d86635200000000f22d80f79b541e1b8a00b8ee08c4a02b880008ed00fe8ea", 0x83}], 0x1, 0x0, 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_pidfd_open(0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xb, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000021c0)=ANY=[@ANYBLOB="bbe700000100040000000000020000001784bffcd4bb1b450c6b17418e234251c379198ee825debe41b332b188cb58f856c5f6a786d3cb2199644bcd1ba081759a54bd41f0db5b261b1a5b6d4201030b84a2", @ANYRES32=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000300000000002000010000000000"], 0x6c, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000002140), 0x40100, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000002380)=""/47, 0x2f) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000080)={0x10001, r7}) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r9, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='numa_maps\x00') pread64(r10, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) 8.969282369s ago: executing program 0 (id=892): socket$inet(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="5c83e2953e203ed024f8f7b4a4e3b0648d540e40b75941bcc68e06657cd332244b90c62982637f24ffb7ce1b58cf77bde3912f45fb52326be7437f864a9e8ec0f1b11273003e2fbe4b"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x44, 0x2, 0x7, 0x301, 0x0, 0x0, {0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x4}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x401}, @NFACCT_FILTER={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x80) getpid() r1 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='xen_mmu_set_pmd\x00'}, 0x61) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x185002, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, 0x0, 0x0) io_uring_setup(0x3, &(0x7f0000000100)) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc044560f, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 8.493966728s ago: executing program 3 (id=894): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40), 0x18401, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004885) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100101) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace_dev_match', 0x51da43, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x856d}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x8, 0x0) socket$inet_sctp(0x2, 0x4, 0x84) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.046059739s ago: executing program 0 (id=896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0x0, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='+\x00', @ANYRES64=r1], 0x2b) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187014, &(0x7f0000000040)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000002c0)={0x8001, 0x9, 0x264, 0xfffffff6, 0x0, "9a0ff8835e66e12aaf3cd3881edf0619fe7e0b", 0xfffffffc, 0x5}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 7.541258284s ago: executing program 2 (id=897): r0 = openat$cdrom(0xffffff9c, &(0x7f00000008c0), 0x200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x9, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [], {0x95, 0x2}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48800) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, 0x0, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0xb0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x5) setsockopt(r5, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) r6 = accept4$inet6(r4, 0x0, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r6, r3, 0x0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000900)={0x3, 0x6d, 0x0, 0x2}) ioctl$CDROMPLAYMSF(r0, 0x5303, &(0x7f0000000180)={0xc, 0x3, 0x8, 0xf, 0x10, 0x4}) socket$xdp(0x2c, 0x3, 0x0) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) 6.831545753s ago: executing program 3 (id=899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x1, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639ab1530087488555d6d92591d54b3a4b2d398d9c826367e94ff87e48b5c84c384e4da2242cd7", 0x76, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r10, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x11, 0x80000001, 0xf00, 0xffffff00, 0x3, 0x0, 0x0, 0x0, 0x1}}) 6.643000112s ago: executing program 2 (id=900): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='+\x00', @ANYRES64=r1], 0x2b) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee6ffd0bf052000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187014, &(0x7f0000000040)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000002c0)={0x8001, 0x9, 0x264, 0xfffffff6, 0x0, "9a0ff8835e66e12aaf3cd3881edf0619fe7e0b", 0xfffffffc, 0x5}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) 6.212727799s ago: executing program 0 (id=901): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000002004000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x7fff, 0x6}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000340)=[{0x0, 0x3, 0xa, 0xb}, {0x2, 0x2, 0xf, 0x7}, {0x5, 0x2, 0x13, 0x2}, {0x5, 0x1, 0x5, 0x9}], 0x10, 0x35, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r1, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x40000, 0x0, 0xfffffffc, 0x356}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f00000004c0)}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r9 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) io_uring_enter(r6, 0x3f70, 0x0, 0x0, 0x0, 0x0) 5.098409796s ago: executing program 0 (id=902): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) r2 = gettid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000002140)) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xd) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "64f30ea84907e175d5966472c23d26ce8d6f3c"}) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_open_dev$ptys(0xc, 0x3, 0x1) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)=0x8000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x58, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x6}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc8}}, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x13) r8 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCXONC(r8, 0x540a, 0x3) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{}, 0xee, 0x0, 0x0, 0x0, "bc27adc50d03fb36a26d1d33610708eb844846979c3e552e4f42636ec483561f986e3e2a5455252a03b32ffd44fd8a40b0353a4025411e0620ec9757810556d2"}, 0x48}, 0x2}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0)={r9, r10/1000+60000}, 0x8) r11 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40088a01, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$sock(r1, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003440)}, 0x0) 5.053360833s ago: executing program 3 (id=903): socket$kcm(0x10, 0x400000002, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x541b, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="af5c0000100000000c01858083880b00060b8b0188058c8e"]) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) iopl(0x3) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="d0600b401f39b97bf93ecf49759e94b4519a0de2f87e5c417273a5dce55efb335b22dce602ca972f116438489fdab766171401f130eb1c9e78ec70db15755f97ca197fc3da0b85ea0d2f7bdffcc1caa5810430b5448f4ae272489f5c7ac1e4660c4f7b0446d5457181924a3d4dbfdfee93a14379adfe7c1effdacb69a945", 0x7e}], 0x1, 0xa, 0x6e6f2b53, 0x10) sendmsg$key(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r1, @ANYRES8=r3, @ANYBLOB="356a48745552987210f837794ba98667e1ea1e0e0a49b61414f814ee1deb195180f4edc008b1bc2511637c24d4ef953d57c22f21d903e1e5caee18a3cb58bcae54ba46b68423020eec22242be97c298ae22b743cbbddfefff2463214201d4fbecd2aa82e29bdff930d243f51a7282f0806f668b68c1fea15eeb1fa38b76503eea11f0e92ef0db724dec3187318e094192069500fc3531d7a43bbd5db74840fc7ecc6f8edbe9fc6703aeb61a17105", @ANYBLOB="4a9bd465e0d60340353edd5b2f4925a453b707459d0be5316c7f3b6517f053cc3d6d8bb4c2990cb43499207cf68010b141c39f07025db0cb2c4fc32cf04379e3e528cdcd0708b046a650c22b08017ae4eb05b217fd5b94896c680f93cba69b572b84662cfd76e34512c66b7ceae041081d6479ac336928b388", @ANYRES16=r2], 0x10}}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x109280, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x3091, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) 4.937296591s ago: executing program 1 (id=904): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3000f7ffff33000000030a01080000000000000000010000000900030073797a320000000008000a40000000020900010073797a3000"], 0x7c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="000000000400"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000950000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0x0, 0x0}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) prlimit64(r5, 0xe, &(0x7f0000000040)={0x809, 0x8e}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000580)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(r6, 0x4b, &(0x7f0000000200)=0x81) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) open$dir(0x0, 0x0, 0x0) acct(&(0x7f0000000300)='./file0\x00') sendmsg$inet(r8, &(0x7f0000000280)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000140)="e1", 0x1}, {&(0x7f0000000180)}], 0x2}, 0x10) write$UHID_INPUT(r10, &(0x7f0000001300)={0xc, {"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", 0xfffffffffffffebd}}, 0x1006) socket$key(0xf, 0x3, 0x2) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f00000002c0)={0x8, &(0x7f0000000440)=[{0x11, 0x7}, {0x6, 0x8}, {0x5cec, 0xc616}, {0x1, 0x929}, {0x800, 0xd}, {0x9, 0x9}, {0x4000, 0x1}, {0x7fff, 0xe559}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x110, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) 3.942964835s ago: executing program 1 (id=905): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r4 = socket$kcm(0x22, 0x2, 0x21) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000100)={r5, 0x2}) recvmsg(r4, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x100) write$cgroup_freezer_state(r2, &(0x7f0000000400)='FROZEN\x00', 0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x3305) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000001427cea0c38772960000e2307cb71dde0401becb6e2a2e12", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040a13"], 0x7) syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000280)) 3.262854493s ago: executing program 2 (id=906): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) signalfd(r0, &(0x7f00000001c0)={[0x401, 0x77f]}, 0x8) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0xa94, 0x0, &(0x7f0000000300)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x129301) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@dyn}]}) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000180)=ANY=[@ANYBLOB="0200200c1000070060"]) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201aa0467668746006c000000000040800183c0101ac3dd65ee3b9534731a57af0771044b2c8560b016100109021200010000000000000000000000000000000000a754fab9da55391129f18ceefbca0b3838d3fece93f5040000000000000039f1400b96"], 0x0) syz_usb_disconnect(r8) 3.074888197s ago: executing program 1 (id=907): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x169802, 0x0) r1 = dup(r0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000180)={@remote, 0x66}) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x101ff, 0x0, 0x0, 0x2000, &(0x7f00004ef000/0x2000)=nil}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, 0x0) r5 = syz_open_pts(r4, 0x0) dup3(r5, r4, 0x0) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000700, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x14}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0/file0', [{0x20, 'Q\x84\xf6ui\xfa\xf5\x16i\x859o\xe5\x13\xd5gV\x04@\x98\xb0\bQ+\xe2G\xa1\x1e\x01\xa9\xd6w\xdf\xa6\x9d\xcc<\x86\xfd\x18\x99\x19\xed\xc2\xdc\xf4\xbdV\xfeF)T\xb6\xc6\v`\xbf\xec2\xf5\x12R\xa1\x18\x9a<\x8fx\xf4\xcc\x18\xfc\xdb\x0e\xe7\xde^\x88vN\xe0\xe4P\x1dj\xd6&7\x7f\xe82\x92w\x12\t\xff\x19$\x93\xd5\xa4\xe2}\x9aA9p\xffk0\x8c\xc3\xae[n1\xb4\xd7\xe6\xa4\xc2\x86M\x83\x1d\xd7\x84\xa4\x85n(\xd3\x95\x82\xe0\xff\x89=\xe6\xceM\x12'}, {0x20, '/de\x00\x04\x00\x00llb0\x00'}, {0x20, '+{[{#P\x80P\xc8Z\xc6\x19?\x8f\xd3\x16e\xfa\xd3en\xe8\xbeN]`\x1f\x895\x1e\x8d\x9dz\xdc\xf1\xaa\xbau\f\xbaSw4\xf2s(}\xebo\x9d\r \x13}\"wS\xe1\\\x19\xb8\x1b)\xe1\v\xe2)*\xa2b\xbd \x1f$\xcb\x8b\xfa,V\xa0\xd8\xb2\xb9\x12\xc6w01\x90%\xb7?\xee'}, {0x20, '~\x05\x82\xb9\x996.\xb9\x98Zla\x03\xcc\x894\xa6\xcb\b\xfd\xdc\xfa\xaa\x9d\xa1\xcc\xe0\xa8S\xf0\b!x\bj)\x87\xeb\xc8\xca\x1aH\x9e\x06\xbe\x1cJ\x91f\x0f\xa4H\xbe\x02\xdac\x85\xee\x9c#\x10\\\x01.\t:\xf22o\',H\x12$\xd3\x00Nj\xa4Q\xeeM\xd9)S\xb9\xa0\xed\xb9\xb6\x9d\xb8U?c\x11\x06\x00]\xd0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc7\v\xf0\x86\xf7\xa5\x9e\x96\xba\x90\x8e\xff\xc5\xdf_\xec\xef*-P\x102q&R\x925\xff\xff\xff\xff\xff\xff\xff@\x13\xde\xf7\xba\xa0\xab\xd7\xf3\xdb\xae\x991C\n\xfej0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x81}}]}, 0x38}}, 0x0) kcmp(r0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc08000140000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) socket$unix(0x1, 0x5, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001180)) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r8, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f00000000c0)) 287.380463ms ago: executing program 1 (id=911): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff0710670600000f000000170300000ee6ffd0bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$KVM_SET_PIT(r4, 0x4048aec9, &(0x7f0000000180)={[{0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58}], 0x1}) memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x5, 0x2, 0x8}) ioctl$TCFLSH(0xffffffffffffffff, 0x40384708, 0x20000000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x40000) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x7, 0x0, &(0x7f0000000000)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 267.497969ms ago: executing program 0 (id=912): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000080), 0x200000, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYRESDEC=r0, @ANYRES64=0x0, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES64=r0], &(0x7f0000000380)='syzkaller\x00', 0x8, 0xb7, &(0x7f0000000140)=""/183, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000640)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 225.614824ms ago: executing program 2 (id=913): sched_setaffinity(0x0, 0xfffffffffffffe58, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x18, "000080f100df000000a7d9de16c708db7200"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0x5, 0x4, 0x6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4", 0xa) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001b40), 0x0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/217, 0xd9}, {&(0x7f0000000040)=""/112, 0x70}], 0x2, &(0x7f0000000880)=[{0x0}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_io_uring_setup(0x56c1, &(0x7f0000000580)={0x0, 0x4f89, 0x400, 0xfffffffd, 0x1}, &(0x7f0000000280), &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000440)='cpuacct.usage\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, "00291f", 0x0, 0xb}) 0s ago: executing program 1 (id=914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000200)='./bus\x00', 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='+\x00', @ANYRES64=r1], 0x2b) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x40187014, &(0x7f0000000040)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000002c0)={0x8001, 0x9, 0x264, 0xfffffff6, 0x0, "9a0ff8835e66e12aaf3cd3881edf0619fe7e0b", 0xfffffffc, 0x5}) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) kernel console output (not intermixed with test programs): family 0 port 6081 - 0 [ 49.732463][ T5341] veth0_macvtap: entered promiscuous mode [ 49.738375][ T5341] veth1_macvtap: entered promiscuous mode [ 49.752588][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.753137][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.759396][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.759598][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.763000][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.766135][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.771897][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.776124][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.779594][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.783359][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.788038][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.804054][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.807788][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.811124][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.815826][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.819158][ T5341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.822678][ T5341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.827826][ T5341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.841623][ T5341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.844730][ T5341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.847873][ T5341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.850862][ T5341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.858966][ T5350] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.921151][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.923224][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.932891][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.941569][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.956504][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.957344][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.958548][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.962713][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.425853][ T5426] warning: `syz.1.6' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.896613][ T5430] evm: overlay not supported [ 51.030872][ T5432] Bluetooth: MGMT ver 1.23 [ 51.062530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 51.493816][ T5343] Bluetooth: hci0: command tx timeout [ 51.493908][ T5353] Bluetooth: hci1: command tx timeout [ 51.494226][ T67] Bluetooth: hci3: command tx timeout [ 51.494247][ T67] Bluetooth: hci2: command tx timeout [ 52.258359][ T5441] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 52.313908][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.804732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.883849][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 52.905082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.014083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.017634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.213978][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.264050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 53.573743][ T5353] Bluetooth: hci1: command tx timeout [ 53.573826][ T5343] Bluetooth: hci2: command tx timeout [ 53.575214][ T5353] Bluetooth: hci3: command tx timeout [ 53.585334][ T5353] Bluetooth: hci0: command tx timeout [ 54.672335][ T5501] process 'syz.1.15' launched './file0' with NULL argv: empty string added [ 54.694264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 55.226923][ T5506] input: syz0 as /devices/virtual/input/input5 [ 55.655826][ T5353] Bluetooth: hci0: command tx timeout [ 55.655863][ T5351] Bluetooth: hci3: command tx timeout [ 55.663826][ T5353] Bluetooth: hci2: command tx timeout [ 55.664049][ T5351] Bluetooth: hci1: command tx timeout [ 57.321073][ T5343] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 57.325951][ T5343] CPU: 1 UID: 0 PID: 5343 Comm: kworker/u33:2 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 57.328889][ T5343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.331904][ T5343] Workqueue: hci1 hci_rx_work [ 57.333143][ T5343] Call Trace: [ 57.334033][ T5343] [ 57.334767][ T5343] dump_stack_lvl+0x16c/0x1f0 [ 57.335962][ T5343] sysfs_warn_dup+0x7f/0xa0 [ 57.337090][ T5343] sysfs_create_dir_ns+0x24d/0x2b0 [ 57.338415][ T5343] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 57.340124][ T5343] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 57.342097][ T5343] ? kobject_add_internal+0x12d/0x990 [ 57.344053][ T5343] ? do_raw_spin_unlock+0x172/0x230 [ 57.345850][ T5343] kobject_add_internal+0x2c8/0x990 [ 57.347202][ T5343] kobject_add+0x16f/0x240 [ 57.348390][ T5343] ? __pfx_kobject_add+0x10/0x10 [ 57.349852][ T5343] ? class_to_subsys+0x3e/0x160 [ 57.351533][ T5343] ? do_raw_spin_unlock+0x172/0x230 [ 57.352858][ T5343] ? kobject_put+0xab/0x5a0 [ 57.354034][ T5343] device_add+0x289/0x1a70 [ 57.355254][ T5343] ? __pfx_dev_set_name+0x10/0x10 [ 57.355825][ T5534] tmpfs: Bad value for 'uid' [ 57.356540][ T5343] ? __pfx_device_add+0x10/0x10 [ 57.358018][ T5534] tmpfs: Bad value for 'uid' [ 57.359229][ T5343] ? mgmt_send_event_skb+0x2f2/0x460 [ 57.362638][ T5343] hci_conn_add_sysfs+0x17e/0x230 [ 57.364466][ T5343] le_conn_complete_evt+0xfc7/0x1cf0 [ 57.366124][ T5343] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 57.367600][ T5343] ? trace_contention_end+0xea/0x140 [ 57.368978][ T5343] ? __mutex_lock+0x1a6/0x9c0 [ 57.370448][ T5343] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 57.371991][ T5343] ? skb_pull_data+0x166/0x210 [ 57.373257][ T5343] hci_le_meta_evt+0x2e2/0x5d0 [ 57.374488][ T5343] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 57.376124][ T5343] hci_event_packet+0x666/0x1190 [ 57.377388][ T5343] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 57.378736][ T5343] ? __pfx_hci_event_packet+0x10/0x10 [ 57.380249][ T5343] ? mark_held_locks+0x9f/0xe0 [ 57.381507][ T5343] ? kcov_remote_start+0x3cf/0x6e0 [ 57.382832][ T5343] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.384176][ T5343] hci_rx_work+0x2c6/0x16c0 [ 57.385335][ T5343] ? lock_acquire+0x2f/0xb0 [ 57.386528][ T5343] ? process_one_work+0x8bb/0x1b30 [ 57.387882][ T5343] process_one_work+0x958/0x1b30 [ 57.389184][ T5343] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 57.391196][ T5343] ? __pfx_process_one_work+0x10/0x10 [ 57.393176][ T5343] ? assign_work+0x1a0/0x250 [ 57.394877][ T5343] worker_thread+0x6c8/0xf00 [ 57.396595][ T5343] ? __kthread_parkme+0x148/0x220 [ 57.398413][ T5343] ? __pfx_worker_thread+0x10/0x10 [ 57.400227][ T5343] kthread+0x2c1/0x3a0 [ 57.401376][ T5343] ? _raw_spin_unlock_irq+0x23/0x50 [ 57.402706][ T5343] ? __pfx_kthread+0x10/0x10 [ 57.403906][ T5343] ret_from_fork+0x45/0x80 [ 57.405073][ T5343] ? __pfx_kthread+0x10/0x10 [ 57.406261][ T5343] ret_from_fork_asm+0x1a/0x30 [ 57.407520][ T5343] [ 57.409198][ T5343] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 57.414789][ T5343] Bluetooth: hci1: failed to register connection device [ 57.743412][ T5343] Bluetooth: hci1: command tx timeout [ 58.112531][ T5537] netlink: 36 bytes leftover after parsing attributes in process `syz.0.23'. [ 58.343554][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 58.776947][ T5544] mmap: syz.2.24 (5544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.455716][ T5555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 59.536249][ T5555] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.574387][ T5558] syz.2.28 uses obsolete (PF_INET,SOCK_PACKET) [ 59.818943][ T5343] Bluetooth: hci1: command tx timeout [ 59.857095][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.966536][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.044226][ T5351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.047385][ T5351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.050673][ T5351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.060333][ T5351] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.062491][ T5351] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.066769][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.072118][ T5351] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.138740][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.226217][ T12] bridge_slave_1: left allmulticast mode [ 60.228019][ T12] bridge_slave_1: left promiscuous mode [ 60.230474][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.244392][ T12] bridge_slave_0: left allmulticast mode [ 60.248331][ T12] bridge_slave_0: left promiscuous mode [ 60.252410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.503884][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.510774][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.516877][ T12] bond0 (unregistering): Released all slaves [ 60.526303][ T5560] chnl_net:caif_netlink_parms(): no params data found [ 60.803281][ T5560] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.807627][ T5560] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.809581][ T5560] bridge_slave_0: entered allmulticast mode [ 60.811615][ T5560] bridge_slave_0: entered promiscuous mode [ 60.817743][ T5560] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.820439][ T5560] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.822581][ T5560] bridge_slave_1: entered allmulticast mode [ 60.830459][ T5560] bridge_slave_1: entered promiscuous mode [ 60.894667][ T5560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.898311][ T5560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.929615][ T5574] mkiss: ax0: crc mode is auto. [ 60.999204][ T5560] team0: Port device team_slave_0 added [ 61.003298][ T5560] team0: Port device team_slave_1 added [ 61.044129][ T12] hsr_slave_0: left promiscuous mode [ 61.046740][ T12] hsr_slave_1: left promiscuous mode [ 61.048994][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.050950][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 61.063420][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.065410][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 61.088997][ T12] veth1_macvtap: left promiscuous mode [ 61.090643][ T12] veth0_macvtap: left promiscuous mode [ 61.092220][ T12] veth1_vlan: left promiscuous mode [ 61.093708][ T12] veth0_vlan: left promiscuous mode [ 61.644404][ T12] team0 (unregistering): Port device team_slave_1 removed [ 61.720905][ T12] team0 (unregistering): Port device team_slave_0 removed [ 62.144257][ T5343] Bluetooth: hci3: command tx timeout [ 62.259798][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.261653][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.273853][ T5560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.321635][ T5560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.326717][ T5560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.334208][ T5560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.399105][ T5560] hsr_slave_0: entered promiscuous mode [ 62.411524][ T5560] hsr_slave_1: entered promiscuous mode [ 62.423886][ T5560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.426689][ T5560] Cannot create hsr debugfs directory [ 62.469657][ T5590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 62.772981][ T5351] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.781418][ T5351] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.784408][ T5351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.787730][ T5351] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.790938][ T5351] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.793627][ T5351] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.840467][ T5591] netlink: 'syz.3.35': attribute type 2 has an invalid length. [ 63.046396][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.156445][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.173590][ T5600] chnl_net:caif_netlink_parms(): no params data found [ 63.239695][ T5560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.260930][ T5560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.280808][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.321405][ T5560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.422797][ T5560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.482759][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.496713][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.499362][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.502081][ T5600] bridge_slave_0: entered allmulticast mode [ 63.505902][ T5600] bridge_slave_0: entered promiscuous mode [ 63.510900][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.513051][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.516228][ T5600] bridge_slave_1: entered allmulticast mode [ 63.518608][ T5600] bridge_slave_1: entered promiscuous mode [ 63.570525][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.578573][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.617257][ T5600] team0: Port device team_slave_0 added [ 63.620061][ T5600] team0: Port device team_slave_1 added [ 63.668950][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.671151][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.686791][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.699276][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.701636][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.712009][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.770637][ T5600] hsr_slave_0: entered promiscuous mode [ 63.776370][ T5600] hsr_slave_1: entered promiscuous mode [ 63.779166][ T5600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.781461][ T5600] Cannot create hsr debugfs directory [ 63.784532][ T12] bridge_slave_1: left allmulticast mode [ 63.785980][ T12] bridge_slave_1: left promiscuous mode [ 63.796051][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.803614][ T12] bridge_slave_0: left allmulticast mode [ 63.819652][ T12] bridge_slave_0: left promiscuous mode [ 63.821246][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.166525][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.178849][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.187482][ T12] bond0 (unregistering): Released all slaves [ 64.190240][ T5637] tmpfs: Unknown parameter 'Î ' [ 64.224991][ T5351] Bluetooth: hci3: command tx timeout [ 64.279575][ T5560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.405187][ T5560] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.502422][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.504577][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.563323][ T12] hsr_slave_0: left promiscuous mode [ 64.568322][ T12] hsr_slave_1: left promiscuous mode [ 64.570173][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.572062][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.574466][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.576444][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.606149][ T12] veth1_macvtap: left promiscuous mode [ 64.608119][ T12] veth0_macvtap: left promiscuous mode [ 64.610013][ T12] veth1_vlan: left promiscuous mode [ 64.611838][ T12] veth0_vlan: left promiscuous mode [ 64.854541][ T5351] Bluetooth: hci0: command tx timeout [ 65.375541][ T12] team0 (unregistering): Port device team_slave_1 removed [ 65.494479][ T12] team0 (unregistering): Port device team_slave_0 removed [ 66.179516][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.181559][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.285939][ T5560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.293897][ T5351] Bluetooth: hci3: command tx timeout [ 66.371553][ T5652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.41'. [ 66.454225][ T5658] overlayfs: failed to resolve './file1': -2 [ 66.511512][ T5560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.573574][ T5560] veth0_vlan: entered promiscuous mode [ 66.583236][ T5560] veth1_vlan: entered promiscuous mode [ 66.605192][ T5560] veth0_macvtap: entered promiscuous mode [ 66.614189][ T5560] veth1_macvtap: entered promiscuous mode [ 66.655106][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.658100][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.660826][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.663556][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.672127][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.675310][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.682899][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.695362][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.698758][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.702003][ T5560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.706937][ T5560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.714474][ T5560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.716697][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.760374][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.798885][ T5560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.801680][ T5560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.808688][ T5560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.812163][ T5560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.920340][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.937958][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.940490][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.948850][ T5351] Bluetooth: hci0: command tx timeout [ 66.976289][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.978926][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.981219][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.000282][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.002954][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.084902][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.087537][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.278612][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.342221][ T5600] veth0_vlan: entered promiscuous mode [ 67.360113][ T5600] veth1_vlan: entered promiscuous mode [ 67.417649][ T5600] veth0_macvtap: entered promiscuous mode [ 67.422125][ T5600] veth1_macvtap: entered promiscuous mode [ 67.433275][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.438164][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.441645][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.447117][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.450737][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.454797][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.459518][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.465345][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.469016][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.472482][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.477306][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.482286][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.486225][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.491374][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.497558][ T5600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.500646][ T5600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.504568][ T5600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.507764][ T5600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.552358][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.559231][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.579908][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.582659][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.384580][ T5351] Bluetooth: hci3: command tx timeout [ 68.820551][ T5708] overlayfs: conflicting lowerdir path [ 68.842276][ T5708] ax25_connect(): syz.3.45 uses autobind, please contact jreuter@yaina.de [ 68.846365][ T5708] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.013992][ T5351] Bluetooth: hci0: command tx timeout [ 69.320296][ T5715] Bluetooth: MGMT ver 1.23 [ 70.056248][ T5719] Zero length message leads to an empty skb [ 70.944583][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.946641][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.095000][ T5351] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 71.098273][ T5351] Bluetooth: hci1: Injecting HCI hardware error event [ 71.102546][ T5351] Bluetooth: hci1: hardware error 0x00 [ 72.627061][ T5343] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 72.629658][ T5343] Bluetooth: hci3: Injecting HCI hardware error event [ 72.635463][ T5343] Bluetooth: hci3: hardware error 0x00 [ 72.920924][ T5750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 73.181536][ T5351] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 74.441428][ T5766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.62'. [ 74.694439][ T5343] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 80.880170][ T5851] overlayfs: missing 'lowerdir' [ 81.176629][ T979] cfg80211: failed to load regulatory.db [ 81.927348][ T5874] overlay: Unknown parameter '/' [ 82.149651][ T5870] kvm: pic: non byte write [ 82.883605][ T5886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 82.968186][ T5888] netlink: 20 bytes leftover after parsing attributes in process `syz.1.86'. [ 83.075648][ T5891] overlayfs: failed to resolve './file1': -2 [ 83.515421][ T5890] binder: 5889:5890 ioctl 4018620d 0 returned -22 [ 83.572102][ T5894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 83.773826][ T5895] netlink: 'syz.0.87': attribute type 2 has an invalid length. [ 84.650533][ T84] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.758913][ T84] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.831289][ T84] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.840965][ T5351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.853848][ T5351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.858361][ T5351] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.863363][ T5351] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.866915][ T5351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.870638][ T5351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.908122][ T84] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.023787][ T5908] chnl_net:caif_netlink_parms(): no params data found [ 85.052529][ T84] bridge_slave_1: left allmulticast mode [ 85.057014][ T84] bridge_slave_1: left promiscuous mode [ 85.058547][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.064094][ T84] bridge_slave_0: left allmulticast mode [ 85.065642][ T84] bridge_slave_0: left promiscuous mode [ 85.067292][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.339236][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.350364][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.357250][ T84] bond0 (unregistering): Released all slaves [ 85.496007][ T5914] kvm: pic: non byte write [ 85.564982][ T5908] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.566879][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.568772][ T5908] bridge_slave_0: entered allmulticast mode [ 85.581719][ T5908] bridge_slave_0: entered promiscuous mode [ 85.585541][ T5908] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.587464][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.589332][ T5908] bridge_slave_1: entered allmulticast mode [ 85.594542][ T5908] bridge_slave_1: entered promiscuous mode [ 85.688757][ T5908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.731235][ T5908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.785163][ T5908] team0: Port device team_slave_0 added [ 85.804875][ T5908] team0: Port device team_slave_1 added [ 85.811089][ T5929] binder: 5927:5929 ioctl 4018620d 0 returned -22 [ 85.846027][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.847935][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.858065][ T5908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.874093][ T84] hsr_slave_0: left promiscuous mode [ 85.876770][ T84] hsr_slave_1: left promiscuous mode [ 85.879377][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.890232][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.896372][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.900178][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.922253][ T84] veth1_macvtap: left promiscuous mode [ 85.929490][ T84] veth0_macvtap: left promiscuous mode [ 85.931691][ T84] veth1_vlan: left promiscuous mode [ 85.934159][ T84] veth0_vlan: left promiscuous mode [ 86.526405][ T84] team0 (unregistering): Port device team_slave_1 removed [ 86.587875][ T84] team0 (unregistering): Port device team_slave_0 removed [ 86.945028][ T5343] Bluetooth: hci1: command tx timeout [ 87.156867][ T5908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.162739][ T5908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.170066][ T5908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.300109][ T5946] tmpfs: Bad value for 'mpol' [ 87.386690][ T5908] hsr_slave_0: entered promiscuous mode [ 87.390532][ T5908] hsr_slave_1: entered promiscuous mode [ 87.392283][ T5908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.394924][ T5908] Cannot create hsr debugfs directory [ 87.998660][ T5941] binder: 5940:5941 ioctl 4018620d 0 returned -22 [ 88.127919][ T5908] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.146355][ T5908] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.155808][ T5908] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.171103][ T5908] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.199629][ T5987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.98'. [ 88.316733][ T5908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.319140][ T5979] kvm: pic: non byte write [ 88.346566][ T5908] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.355495][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.357429][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.367545][ T1105] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.369428][ T1105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.707472][ T5908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.762843][ T5908] veth0_vlan: entered promiscuous mode [ 88.783095][ T5908] veth1_vlan: entered promiscuous mode [ 88.817451][ T5908] veth0_macvtap: entered promiscuous mode [ 88.825194][ T5908] veth1_macvtap: entered promiscuous mode [ 88.841743][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.846774][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.855503][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.859221][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.862014][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.871044][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.877711][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.891509][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.896317][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.899573][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.902536][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.912111][ T5908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.918962][ T5908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.923089][ T5908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.947514][ T5908] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.949985][ T5908] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.952992][ T5908] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.956641][ T5908] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.014459][ T5343] Bluetooth: hci1: command tx timeout [ 89.085453][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.087587][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.097935][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.100045][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.323951][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 90.576675][ T6031] kvm: pic: non byte write [ 90.886156][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.034969][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.042047][ T5351] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.045255][ T5351] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.047509][ T5351] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.049733][ T5351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.051858][ T5351] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 91.054084][ T5351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.094040][ T5351] Bluetooth: hci1: command tx timeout [ 91.109432][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.174892][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.180239][ T6036] chnl_net:caif_netlink_parms(): no params data found [ 91.241929][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.243930][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.245653][ T6036] bridge_slave_0: entered allmulticast mode [ 91.247590][ T6036] bridge_slave_0: entered promiscuous mode [ 91.251745][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.253497][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.255748][ T6036] bridge_slave_1: entered allmulticast mode [ 91.257694][ T6036] bridge_slave_1: entered promiscuous mode [ 91.306602][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.313095][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.341158][ T6036] team0: Port device team_slave_0 added [ 91.343994][ T6036] team0: Port device team_slave_1 added [ 91.354013][ T63] bridge_slave_1: left allmulticast mode [ 91.355519][ T63] bridge_slave_1: left promiscuous mode [ 91.356995][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.360830][ T63] bridge_slave_0: left allmulticast mode [ 91.362578][ T63] bridge_slave_0: left promiscuous mode [ 91.364372][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.533047][ T6050] libceph: resolve '. [ 91.533047][ T6050] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 91.533047][ T6050] ' (ret=-3): failed [ 91.587096][ T6050] No control pipe specified [ 91.613161][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.620105][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.624478][ T63] bond0 (unregistering): Released all slaves [ 91.721216][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.721252][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.721266][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.731013][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.731052][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.731064][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.757339][ T6050] syz.0.116: attempt to access beyond end of device [ 91.757339][ T6050] loop0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 91.787685][ T6050] qnx4: unable to read the superblock [ 91.907283][ T6036] hsr_slave_0: entered promiscuous mode [ 91.909715][ T6036] hsr_slave_1: entered promiscuous mode [ 91.911757][ T6036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.916578][ T6036] Cannot create hsr debugfs directory [ 91.962539][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.110'. [ 92.061927][ T63] hsr_slave_0: left promiscuous mode [ 92.068854][ T63] hsr_slave_1: left promiscuous mode [ 92.077552][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.082527][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.089110][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.091867][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.207706][ T63] veth1_macvtap: left promiscuous mode [ 92.212561][ T63] veth0_macvtap: left promiscuous mode [ 92.223032][ T63] veth1_vlan: left promiscuous mode [ 92.226783][ T63] veth0_vlan: left promiscuous mode [ 93.093984][ T5351] Bluetooth: hci4: command tx timeout [ 93.143424][ T6065] kvm: pic: non byte write [ 93.173827][ T5351] Bluetooth: hci1: command tx timeout [ 93.710947][ T63] team0 (unregistering): Port device team_slave_1 removed [ 93.971132][ T63] team0 (unregistering): Port device team_slave_0 removed [ 95.174012][ T5351] Bluetooth: hci4: command tx timeout [ 95.297125][ T6036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.305715][ T6036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.310846][ T6036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.315072][ T6036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.351881][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.362943][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.371636][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.374306][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.385010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.387632][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.501454][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.522635][ T6036] veth0_vlan: entered promiscuous mode [ 95.528525][ T6036] veth1_vlan: entered promiscuous mode [ 95.544856][ T6036] veth0_macvtap: entered promiscuous mode [ 95.548248][ T6036] veth1_macvtap: entered promiscuous mode [ 95.555323][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.558006][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.560508][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.563209][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.565770][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.568407][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.571644][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.577219][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.579887][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.582355][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.585118][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.587625][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.590260][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.594573][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.600534][ T6036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.603567][ T6036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.607899][ T6036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.610904][ T6036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.649063][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.651096][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.665975][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.668261][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.867902][ T6126] libceph: resolve '. [ 95.867902][ T6126] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 95.867902][ T6126] ' (ret=-3): failed [ 96.042842][ T6132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.115'. [ 96.149205][ T6130] kvm: pic: non byte write [ 97.253843][ T5351] Bluetooth: hci4: command tx timeout [ 97.921692][ T6151] netlink: 36 bytes leftover after parsing attributes in process `syz.3.124'. [ 98.060623][ T1097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.165411][ T1097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.259536][ T1097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.332455][ T1097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.475356][ T1097] bridge_slave_1: left allmulticast mode [ 98.478736][ T1097] bridge_slave_1: left promiscuous mode [ 98.487587][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.513514][ T1097] bridge_slave_0: left allmulticast mode [ 98.523947][ T1097] bridge_slave_0: left promiscuous mode [ 98.544096][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.577599][ T5343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.584181][ T5343] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.588264][ T5343] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.593228][ T5343] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.597799][ T5343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.603465][ T5343] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.142117][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.155760][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.160509][ T1097] bond0 (unregistering): Released all slaves [ 99.348549][ T5343] Bluetooth: hci4: command tx timeout [ 99.397667][ T6153] chnl_net:caif_netlink_parms(): no params data found [ 99.489623][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.492242][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.499690][ T6153] bridge_slave_0: entered allmulticast mode [ 99.504368][ T6153] bridge_slave_0: entered promiscuous mode [ 99.532103][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.538621][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.546597][ T6153] bridge_slave_1: entered allmulticast mode [ 99.559020][ T6153] bridge_slave_1: entered promiscuous mode [ 99.639995][ T6153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.657715][ T6153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.690046][ T1097] hsr_slave_0: left promiscuous mode [ 99.692226][ T1097] hsr_slave_1: left promiscuous mode [ 99.697434][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.699639][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.706759][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.709686][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.740493][ T1097] veth1_macvtap: left promiscuous mode [ 99.741965][ T1097] veth0_macvtap: left promiscuous mode [ 99.743445][ T1097] veth1_vlan: left promiscuous mode [ 99.746795][ T1097] veth0_vlan: left promiscuous mode [ 100.346351][ T6188] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 100.348194][ T6188] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 100.357534][ T6188] vhci_hcd vhci_hcd.0: Device attached [ 100.528322][ T57] vhci_hcd: vhci_device speed not set [ 100.593786][ T57] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 100.704821][ T5343] Bluetooth: hci2: command tx timeout [ 100.946398][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 100.960800][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.132'. [ 101.041721][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 101.191742][ T6189] vhci_hcd: connection reset by peer [ 101.200310][ T1095] vhci_hcd: stop threads [ 101.210406][ T1095] vhci_hcd: release socket [ 101.212813][ T1095] vhci_hcd: disconnect device [ 101.772260][ T6153] team0: Port device team_slave_0 added [ 101.777843][ T6153] team0: Port device team_slave_1 added [ 101.831340][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.835511][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.847726][ T6153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.858703][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.861185][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.872043][ T6153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.954583][ T6153] hsr_slave_0: entered promiscuous mode [ 101.981134][ T6153] hsr_slave_1: entered promiscuous mode [ 102.212284][ T39] audit: type=1326 audit(1728743511.487:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.0.135" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x0 [ 102.488750][ T6223] dlm: no local IP address has been set [ 102.491111][ T6223] dlm: cannot start dlm midcomms -107 [ 102.577594][ T6153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.590345][ T6153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.599037][ T6153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.642989][ T6153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.706020][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.727949][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.741736][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.745001][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.762493][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.765304][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.774166][ T5343] Bluetooth: hci2: command tx timeout [ 102.834443][ T1159] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.937178][ T1159] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.027027][ T1159] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.060770][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.121690][ T1159] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.135011][ T5351] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 103.141524][ T5351] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 103.145845][ T5351] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 103.152472][ T5351] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 103.157258][ T5351] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 103.162938][ T5351] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 103.225640][ T6153] veth0_vlan: entered promiscuous mode [ 103.263614][ T6153] veth1_vlan: entered promiscuous mode [ 103.362714][ T6153] veth0_macvtap: entered promiscuous mode [ 103.369848][ T6153] veth1_macvtap: entered promiscuous mode [ 103.380826][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.384787][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.388309][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.392557][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.397550][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.400807][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.405800][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.408454][ T1159] bridge_slave_1: left allmulticast mode [ 103.409918][ T1159] bridge_slave_1: left promiscuous mode [ 103.412008][ T1159] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.428099][ T1159] bridge_slave_0: left allmulticast mode [ 103.429692][ T1159] bridge_slave_0: left promiscuous mode [ 103.431216][ T1159] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.016791][ T1159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.020655][ T1159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.024754][ T1159] bond0 (unregistering): Released all slaves [ 104.043872][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.049626][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.052078][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.056129][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.058695][ T6153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.061388][ T6153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.065219][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.092106][ T6153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.096697][ T6153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.098988][ T6153] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.101024][ T6153] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.174288][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.176466][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.193212][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.196635][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.208193][ T6244] chnl_net:caif_netlink_parms(): no params data found [ 104.420917][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.434419][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.437997][ T6244] bridge_slave_0: entered allmulticast mode [ 104.441345][ T6244] bridge_slave_0: entered promiscuous mode [ 104.497891][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.499918][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.501803][ T6244] bridge_slave_1: entered allmulticast mode [ 104.504306][ T6244] bridge_slave_1: entered promiscuous mode [ 104.527204][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.531517][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.561053][ T6244] team0: Port device team_slave_0 added [ 104.566559][ T6244] team0: Port device team_slave_1 added [ 104.586835][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.588694][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.610575][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.637783][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.639656][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.652094][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.679828][ T1159] hsr_slave_0: left promiscuous mode [ 104.685396][ T1159] hsr_slave_1: left promiscuous mode [ 104.689063][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.693591][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.700516][ T1159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.702566][ T1159] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.742807][ T1159] veth1_macvtap: left promiscuous mode [ 104.746323][ T1159] veth0_macvtap: left promiscuous mode [ 104.747932][ T1159] veth1_vlan: left promiscuous mode [ 104.749457][ T1159] veth0_vlan: left promiscuous mode [ 104.854621][ T5343] Bluetooth: hci2: command tx timeout [ 105.174084][ T5343] Bluetooth: hci4: command tx timeout [ 105.365458][ T6311] kvm: pic: non byte write [ 105.726034][ T57] vhci_hcd: vhci_device speed not set [ 106.092244][ T1159] team0 (unregistering): Port device team_slave_1 removed [ 106.193334][ T1159] team0 (unregistering): Port device team_slave_0 removed [ 106.367173][ T6320] random: crng reseeded on system resumption [ 106.567279][ T39] audit: type=1326 audit(1728743515.847:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 106.572999][ T39] audit: type=1326 audit(1728743515.847:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 106.579680][ T39] audit: type=1326 audit(1728743515.857:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=289 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 106.593850][ T39] audit: type=1326 audit(1728743515.857:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 106.611907][ T39] audit: type=1326 audit(1728743515.857:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6321 comm="syz.2.149" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 106.933863][ T5343] Bluetooth: hci2: command tx timeout [ 107.190399][ T6244] hsr_slave_0: entered promiscuous mode [ 107.254197][ T6244] hsr_slave_1: entered promiscuous mode [ 107.257988][ T6244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.260674][ T6244] Cannot create hsr debugfs directory [ 107.263761][ T5343] Bluetooth: hci4: command tx timeout [ 108.212877][ T6244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.225515][ T6244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.229734][ T6244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.233207][ T6244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.259876][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 108.263416][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 108.285812][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 108.288328][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 108.298671][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.307866][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.315516][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.317359][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.320281][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.322184][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.365904][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.157'. [ 108.368281][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.157'. [ 108.568688][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.607236][ T6244] veth0_vlan: entered promiscuous mode [ 108.623247][ T6244] veth1_vlan: entered promiscuous mode [ 109.016506][ T6244] veth0_macvtap: entered promiscuous mode [ 109.020365][ T6244] veth1_macvtap: entered promiscuous mode [ 109.046066][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.048834][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.051889][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.060739][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.063498][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.071350][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.078112][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.083572][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.086654][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.089384][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.092377][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.098603][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.101666][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.106775][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.111388][ T6244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.113967][ T6244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.116311][ T6244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.118552][ T6244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.245689][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.257054][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.271905][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.274759][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.334208][ T5343] Bluetooth: hci4: command tx timeout [ 109.447165][ T39] audit: type=1326 audit(1728743518.727:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.452611][ T39] audit: type=1326 audit(1728743518.727:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.470512][ T39] audit: type=1326 audit(1728743518.747:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.476688][ T39] audit: type=1326 audit(1728743518.747:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.482588][ T39] audit: type=1326 audit(1728743518.747:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.491111][ T39] audit: type=1326 audit(1728743518.747:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.506812][ T39] audit: type=1326 audit(1728743518.747:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.513507][ T39] audit: type=1326 audit(1728743518.747:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.519208][ T39] audit: type=1326 audit(1728743518.747:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.526520][ T39] audit: type=1326 audit(1728743518.747:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.164" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1579 code=0x7ffc0000 [ 109.554168][ T6407] Invalid ELF header magic: != ELF [ 109.876149][ T6412] fuseblk: Bad value for 'fd' [ 109.941605][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 110.063926][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 110.701324][ T5343] Bluetooth: hci1: unexpected subevent 0x06 length: 5 < 10 [ 110.835769][ T6466] input: syz0 as /devices/virtual/input/input6 [ 111.413913][ T5343] Bluetooth: hci4: command tx timeout [ 112.098697][ T6485] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.200'. [ 113.092204][ T6507] kvm: pic: non byte write [ 113.910530][ T6536] netlink: 'syz.0.223': attribute type 10 has an invalid length. [ 113.912634][ T6536] hsr0: entered promiscuous mode [ 113.914384][ T6536] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 114.725080][ T6561] kvm: pic: non byte write [ 115.573924][ T5343] Bluetooth: hci4: command tx timeout [ 115.865505][ T6596] overlay: Unknown parameter '/' [ 117.339973][ T6614] kvm: pic: non byte write [ 118.565817][ T6632] kvm: pic: non byte write [ 118.733136][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 118.847090][ T6659] capability: warning: `syz.0.280' uses 32-bit capabilities (legacy support in use) [ 119.042453][ T6662] overlay: Unknown parameter '/' [ 119.147899][ T6641] kvm: pic: non byte write [ 119.740496][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 119.748580][ T6671] netlink: 16 bytes leftover after parsing attributes in process `syz.0.274'. [ 120.331152][ T6701] capability: warning: `syz.0.288' uses deprecated v2 capabilities in a way that may be insecure [ 120.380745][ T6693] kvm: pic: non byte write [ 120.548678][ T6706] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.290'. [ 120.559727][ T6706] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.851166][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 122.441917][ T6761] block nbd3: not configured, cannot reconfigure [ 122.746280][ T6722] binder: 6721:6722 ioctl 4018620d 0 returned -22 [ 123.876203][ T6781] kvm: pic: non byte write [ 124.574805][ T6789] binder: 6788:6789 ioctl 4018620d 0 returned -22 [ 125.024044][ T6812] binder: 6810:6812 ioctl 4018620d 0 returned -22 [ 125.137807][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 125.254123][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.349'. [ 125.300276][ T6838] binder: 6837:6838 ioctl 4018620d 0 returned -22 [ 126.155499][ T6861] kvm: pic: non byte write [ 127.020894][ T6866] binder: 6865:6866 ioctl 4018620d 0 returned -22 [ 127.240541][ T6876] overlay: Unknown parameter '/' [ 128.461400][ T6891] libceph: resolve '. [ 128.461400][ T6891] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 128.461400][ T6891] ' (ret=-3): failed [ 129.266479][ T6891] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.271636][ T6891] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.286204][ T6891] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 129.299318][ T6891] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.301087][ T6891] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.329562][ T6891] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 129.334833][ T6891] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.343797][ T6891] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.350443][ T6891] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.874539][ T6904] binder: 6903:6904 ioctl 4018620d 0 returned -22 [ 130.613877][ T5343] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.197442][ T6924] block nbd1: not configured, cannot reconfigure [ 131.344040][ T5343] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.413831][ T5343] Bluetooth: hci4: command 0x0c1a tx timeout [ 131.485284][ T6927] kvm: pic: non byte write [ 132.414962][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.417119][ T1374] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.694728][ T5343] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.423834][ T5343] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.493799][ T5343] Bluetooth: hci4: command 0x0c1a tx timeout [ 134.803434][ T5343] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.494330][ T5343] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.541633][ T6986] input: syz1 as /devices/virtual/input/input7 [ 135.574496][ T5343] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.611712][ T6988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 135.738304][ T6988] team0 (unregistering): Port device team_slave_0 removed [ 135.754005][ T6988] team0 (unregistering): Port device team_slave_1 removed [ 135.797225][ T6990] kvm: pic: non byte write [ 136.802024][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'. [ 136.806343][ T7016] IPVS: Error joining to the multicast group [ 137.125285][ T7028] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.418'. [ 137.659477][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.662161][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.674046][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.676690][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.683623][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.693224][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.696353][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.698906][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.701534][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.713876][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.716501][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.719053][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.721718][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.726543][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.729122][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.739854][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.742438][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.746989][ T7049] kvm: pic: non byte write [ 137.749310][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.751880][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.754590][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.762724][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.768876][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.771684][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.774927][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.779035][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.781870][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.785027][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.787766][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.790414][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.798079][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.801867][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.805409][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.808423][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.811091][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.813853][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.816786][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.819395][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.823790][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.828410][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.831449][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.835797][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.838397][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.841370][ T5404] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 137.877726][ T5404] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 138.563832][ T30] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 138.733735][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 138.739337][ T30] usb 7-1: config 0 has no interfaces? [ 138.740787][ T30] usb 7-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 138.744542][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.758034][ T30] usb 7-1: config 0 descriptor?? [ 139.038589][ T7126] binder: 7125:7126 ioctl 4018620d 0 returned -22 [ 139.175875][ T7092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.181974][ T7092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.191327][ T65] usb 7-1: USB disconnect, device number 2 [ 139.230608][ T7130] kvm: pic: non byte write [ 140.313806][ T1289] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 140.477575][ T1289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 140.481897][ T1289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.488127][ T1289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.493082][ T1289] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 140.496551][ T1289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.503391][ T1289] usb 5-1: config 0 descriptor?? [ 140.839791][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.457'. [ 140.959225][ T1289] usbhid 5-1:0.0: can't add hid device: -71 [ 140.961308][ T1289] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 140.968914][ T1289] usb 5-1: USB disconnect, device number 2 [ 141.161845][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 141.313956][ T64] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 141.381429][ T5343] Bluetooth: hci1: unexpected cc 0x2027 length: 2 > 1 [ 141.385221][ T5343] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 141.434081][ T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 141.463758][ T64] usb 6-1: Using ep0 maxpacket: 8 [ 141.469502][ T64] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 141.473154][ T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 141.476255][ T64] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.478828][ T64] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.482280][ T64] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 141.485310][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.541542][ T7173] trusted_key: syz.0.466 sent an empty control message without MSG_MORE. [ 141.583815][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 141.587574][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.590490][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.593031][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 141.599923][ T30] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 141.603167][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.619188][ T30] usb 7-1: config 0 descriptor?? [ 141.705098][ T64] usb 6-1: GET_CAPABILITIES returned 0 [ 141.706719][ T64] usbtmc 6-1:16.0: can't read capabilities [ 141.908851][ T1421] usb 6-1: USB disconnect, device number 2 [ 142.062746][ T30] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0003/input/input8 [ 142.152968][ T30] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0003/input/input9 [ 142.212440][ T30] kye 0003:0458:5011.0003: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 142.288828][ T1289] usb 7-1: USB disconnect, device number 3 [ 143.215090][ T7229] block device autoloading is deprecated and will be removed. [ 143.583789][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 143.736740][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.741828][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.746164][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 143.755672][ T57] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 143.762183][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.774787][ T57] usb 6-1: config 0 descriptor?? [ 143.802264][ T7245] kvm: pic: non byte write [ 144.190864][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 144.195369][ T57] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 144.205362][ T57] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 144.268220][ T5343] Bluetooth: hci1: unexpected cc 0x0c58 length: 4 > 2 [ 144.270530][ T5343] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 144.528554][ T7259] input: syz0 as /devices/virtual/input/input10 [ 144.749918][ T7271] kvm: vcpu 2046: requested lapic timer restore with starting count register 0x390=2927474123 (5854948246 ns) > initial count (1287066782 ns). Using initial count to start timer. [ 145.413934][ T5343] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 145.416338][ T5343] Bluetooth: hci1: Injecting HCI hardware error event [ 145.419974][ T5351] Bluetooth: hci1: hardware error 0x00 [ 146.132115][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.495'. [ 146.279117][ T1289] usb 6-1: USB disconnect, device number 3 [ 146.481732][ T7299] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 147.107358][ T7311] random: crng reseeded on system resumption [ 147.120461][ T7311] Restarting kernel threads ... done. [ 147.493828][ T5351] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 147.517684][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 147.521620][ T7317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.507'. [ 147.752002][ T7319] kvm: pic: non byte write [ 148.533863][ T5351] Bluetooth: hci0: command tx timeout [ 148.709879][ T7369] kvm: pic: non byte write [ 149.543775][ T1289] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.698374][ T1289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.701753][ T1289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.704862][ T1289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.708549][ T1289] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.711054][ T1289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.715202][ T1289] usb 5-1: config 0 descriptor?? [ 150.130923][ T1289] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 150.136663][ T1289] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 150.144074][ T1289] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 150.683883][ T65] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 150.835373][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 150.835392][ T39] audit: type=1326 audit(1728743560.117:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7414 comm="syz.3.539" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 150.863596][ T65] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 150.867249][ T65] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 150.871190][ T65] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 150.876440][ T65] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 150.880345][ T65] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 150.885060][ T65] usb 6-1: config 0 interface 0 has no altsetting 0 [ 150.889331][ T65] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 150.893165][ T65] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 150.896903][ T65] usb 6-1: Product: syz [ 150.898520][ T65] usb 6-1: Manufacturer: syz [ 150.900265][ T65] usb 6-1: SerialNumber: syz [ 150.905055][ T65] usb 6-1: config 0 descriptor?? [ 150.907802][ T7410] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 150.912011][ T65] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 150.921461][ T65] ldusb 6-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 150.925833][ T7415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.928318][ T7415] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 151.286075][ T9] usb 6-1: USB disconnect, device number 4 [ 151.440865][ T9] ldusb 6-1:0.0: LD USB Device #1 now disconnected [ 152.219427][ T39] audit: type=1326 audit(1728743561.497:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.225642][ T39] audit: type=1326 audit(1728743561.497:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.233999][ T39] audit: type=1326 audit(1728743561.507:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.242605][ T65] usb 5-1: USB disconnect, device number 3 [ 152.243736][ T39] audit: type=1326 audit(1728743561.507:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.254741][ T39] audit: type=1326 audit(1728743561.507:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.261250][ T39] audit: type=1326 audit(1728743561.507:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.283897][ T39] audit: type=1326 audit(1728743561.507:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.290990][ T39] audit: type=1326 audit(1728743561.507:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.301422][ T39] audit: type=1326 audit(1728743561.507:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7433 comm="syz.1.545" exe="/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 152.933852][ T5351] Bluetooth: hci4: command 0x0c1a tx timeout [ 152.934310][ T5343] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.296407][ T7474] veth0_vlan: left promiscuous mode [ 154.299277][ T7474] veth0_vlan: entered promiscuous mode [ 154.311285][ T7482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.315183][ T7482] batadv_slave_0: entered promiscuous mode [ 154.534653][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.563'. [ 154.770035][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 154.969159][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 154.971135][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 154.987602][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 154.989573][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 154.991490][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 154.993346][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.003726][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.016859][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.018784][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.020659][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.022713][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.025369][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.033720][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.035628][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.037620][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.039516][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.041342][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.043173][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.053917][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.055915][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.063748][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.065671][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.067574][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.073717][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.075663][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.077503][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.079405][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.091501][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.093432][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.096031][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.097996][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.099955][ T1421] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 155.117580][ T1421] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 155.176024][ T7510] kvm: pic: non byte write [ 155.233743][ T65] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 155.387933][ T65] usb 6-1: config 0 has no interfaces? [ 155.389881][ T65] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 155.392785][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.401854][ T65] usb 6-1: config 0 descriptor?? [ 155.828937][ T1421] usb 6-1: USB disconnect, device number 5 [ 156.270308][ T7522] netlink: 'syz.0.572': attribute type 4 has an invalid length. [ 156.373919][ T5343] Bluetooth: hci2: command 0x0c1a tx timeout [ 158.988446][ T7572] pim6reg: entered allmulticast mode [ 159.243810][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 159.243826][ T39] audit: type=1326 audit(1728743568.517:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.599401][ T39] audit: type=1326 audit(1728743568.857:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.613858][ T39] audit: type=1326 audit(1728743568.877:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.620938][ T39] audit: type=1326 audit(1728743568.877:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.647419][ T39] audit: type=1326 audit(1728743568.877:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.667736][ T39] audit: type=1326 audit(1728743568.877:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.676120][ T39] audit: type=1326 audit(1728743568.877:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.686826][ T39] audit: type=1326 audit(1728743568.877:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.695235][ T39] audit: type=1326 audit(1728743568.877:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.702727][ T39] audit: type=1326 audit(1728743568.877:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7565 comm="syz.1.585" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7fc00000 [ 159.896892][ T7589] binder: 7588:7589 ioctl 4018620d 0 returned -22 [ 163.132429][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 163.145994][ T7630] binder: 7624:7630 ioctl 4018620d 0 returned -22 [ 163.167640][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 163.208298][ T7634] netlink: 'syz.1.605': attribute type 12 has an invalid length. [ 163.392807][ T7638] kvm: pic: non byte write [ 163.725676][ T7650] kvm: pic: non byte write [ 165.502929][ T7684] binder: 7683:7684 ioctl 4018620d 0 returned -22 [ 165.572269][ T1289] IPVS: starting estimator thread 0... [ 165.664738][ T7691] IPVS: using max 34 ests per chain, 81600 per kthread [ 165.755383][ T7694] IPVS: lc: SCTP 127.0.0.1:0 - no destination available [ 166.375495][ T7697] kvm: pic: non byte write [ 166.574566][ T7703] nbd0: detected capacity change from 0 to 12 [ 166.598376][ T7706] block nbd0: Send control failed (result -89) [ 166.600625][ T7706] block nbd0: Request send failed, requeueing [ 166.604858][ T5343] block nbd0: Receive control failed (result -32) [ 166.606385][ T2206] block nbd0: Dead connection, failed to find a fallback [ 166.611930][ T2206] block nbd0: shutting down sockets [ 166.614814][ T2206] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.617601][ T2206] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.623879][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.627186][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.630096][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.633425][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.641129][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.645769][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.649883][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.653199][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.658797][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.662069][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.665190][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.669584][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.672728][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.676094][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.680942][ T7706] ldm_validate_partition_table(): Disk read failed. [ 166.685117][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.688238][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.692820][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 166.696336][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 166.700728][ T7706] Dev nbd0: unable to read RDB block 0 [ 166.705263][ T7706] nbd0: unable to read partition table [ 166.708398][ T7706] nbd0: partition table beyond EOD, truncated [ 166.718609][ T7706] ldm_validate_partition_table(): Disk read failed. [ 166.722721][ T7706] Dev nbd0: unable to read RDB block 0 [ 166.727825][ T7706] nbd0: unable to read partition table [ 166.731185][ T7706] nbd0: partition table beyond EOD, truncated [ 166.783953][ T5404] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 166.937203][ T5404] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 166.941129][ T5404] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 166.946723][ T5404] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 166.950100][ T5404] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.965753][ T7705] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 166.982833][ T5404] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.288346][ T30] usb 7-1: USB disconnect, device number 4 [ 167.321239][ T7720] binder: 7719:7720 ioctl 4018620d 0 returned -22 [ 167.595708][ T39] kauditd_printk_skb: 8934 callbacks suppressed [ 167.595719][ T39] audit: type=1326 audit(1728743576.877:9060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.603067][ T39] audit: type=1326 audit(1728743576.877:9061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.608672][ T39] audit: type=1326 audit(1728743576.887:9062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.615488][ T39] audit: type=1326 audit(1728743576.887:9063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.621327][ T39] audit: type=1326 audit(1728743576.887:9064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.626902][ T39] audit: type=1326 audit(1728743576.887:9065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.632339][ T39] audit: type=1326 audit(1728743576.887:9066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.637970][ T39] audit: type=1326 audit(1728743576.887:9067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.643407][ T39] audit: type=1326 audit(1728743576.887:9068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=230 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.648928][ T39] audit: type=1326 audit(1728743576.887:9069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.1.629" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe4579 code=0x7ffc0000 [ 167.994179][ T7733] kvm: pic: non byte write [ 168.034669][ T30] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 168.185083][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.188745][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.200897][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 168.204916][ T30] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 168.207415][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.215029][ T30] usb 5-1: config 0 descriptor?? [ 168.588395][ T7741] kvm: pic: non byte write [ 168.642264][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 168.648102][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 168.652767][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 168.658045][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 168.660711][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 168.665168][ T30] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 168.671271][ T30] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 168.678676][ T30] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 169.429377][ T7752] binder: 7751:7752 ioctl 4018620d 0 returned -22 [ 169.945796][ T7731] usb 5-1: string descriptor 0 read error: -2 [ 170.083842][ T65] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 170.213923][ T65] usb 5-1: device descriptor read/64, error -32 [ 170.453836][ T65] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 170.583885][ T65] usb 5-1: device descriptor read/64, error -32 [ 171.575490][ T5673] usb 5-1: USB disconnect, device number 4 [ 171.885755][ T7776] kvm: pic: non byte write [ 172.165905][ T7781] kvm: pic: non byte write [ 172.327576][ T7786] binder: 7785:7786 ioctl 4018620d 0 returned -22 [ 174.610485][ T39] kauditd_printk_skb: 27 callbacks suppressed [ 174.610495][ T39] audit: type=1326 audit(1728743583.887:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.622544][ T39] audit: type=1326 audit(1728743583.887:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.631319][ T39] audit: type=1326 audit(1728743583.897:9099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.641594][ T39] audit: type=1326 audit(1728743583.897:9100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.647848][ T39] audit: type=1326 audit(1728743583.897:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.653555][ T39] audit: type=1326 audit(1728743583.897:9102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.661735][ T39] audit: type=1326 audit(1728743583.897:9103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.668018][ T39] audit: type=1326 audit(1728743583.897:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.677115][ T39] audit: type=1326 audit(1728743583.897:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 174.682939][ T39] audit: type=1326 audit(1728743583.897:9106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7817 comm="syz.0.653" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc1579 code=0x7ffc0000 [ 175.011430][ T7820] kvm: pic: non byte write [ 175.646401][ T7837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.659'. [ 175.666976][ T7833] kvm: pic: non byte write [ 178.343744][ T5404] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 178.504675][ T5404] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 178.507699][ T5404] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 178.510762][ T5404] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.517049][ T5404] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 178.520346][ T5404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.523165][ T5404] usb 5-1: Product: syz [ 178.524668][ T5404] usb 5-1: Manufacturer: syz [ 178.526239][ T5404] usb 5-1: SerialNumber: syz [ 178.555997][ T7870] kvm: pic: non byte write [ 178.745085][ T5404] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 178.985551][ T5387] usb 5-1: USB disconnect, device number 5 [ 178.995484][ T7875] kvm: pic: non byte write [ 179.001732][ T5387] usblp0: removed [ 179.575951][ T7884] [U] [ 179.576891][ T7884] [U] [ 179.577620][ T7884] [U] [ 179.578377][ T7884] [U] [ 179.579249][ T7884] [U] [ 179.580077][ T7884] [U] [ 179.580800][ T7884] [U] [ 179.581548][ T7884] [U] [ 179.583219][ T7884] [U] [ 179.584035][ T7884] [U] [ 179.584756][ T7884] [U] [ 179.585549][ T7884] [U] [ 179.589624][ T7884] [U] [ 179.590350][ T7884] [U] [ 179.591061][ T7884] [U] [ 179.591870][ T7884] [U] [ 179.592677][ T7884] [U] [ 179.593371][ T7884] [U] [ 179.594100][ T7884] [U] [ 179.594845][ T7884] [U] [ 179.596663][ T7884] [U] [ 179.597415][ T7884] [U] [ 179.598146][ T7884] [U] [ 179.598890][ T7884] [U] [ 179.599851][ T7884] [U] [ 179.600640][ T7884] [U] [ 179.601359][ T7884] [U] [ 179.602077][ T7884] [U] [ 179.602898][ T7884] [U] [ 179.603626][ T7884] [U] [ 179.604480][ T7884] [U] [ 179.605183][ T7884] [U] [ 179.607093][ T7884] [U] [ 179.607892][ T7884] [U] [ 179.608615][ T7884] [U] [ 179.609318][ T7884] [U] [ 179.610183][ T7884] [U] [ 179.611000][ T7884] [U] [ 179.611725][ T7884] [U] [ 179.612448][ T7884] [U] [ 179.613320][ T7884] [U] [ 179.614075][ T7884] [U] [ 179.614823][ T7884] [U] [ 179.615613][ T7884] [U] [ 179.617783][ T7884] [U] [ 179.618683][ T7884] [U] [ 179.619432][ T7884] [U] [ 179.620162][ T7884] [U] [ 179.621155][ T7884] [U] [ 179.621896][ T7884] [U] [ 179.622650][ T7884] [U] [ 179.623375][ T7884] [U] [ 179.624873][ T7884] [U] [ 179.625690][ T7884] [U] [ 179.626503][ T7884] [U] [ 179.627219][ T7884] [U] [ 179.637841][ T7884] [U] [ 179.638916][ T7884] [U] [ 179.639951][ T7884] [U] [ 179.640991][ T7884] [U] [ 179.641993][ T7884] [U] [ 179.642833][ T7884] [U] [ 179.643582][ T7884] [U] [ 179.644327][ T7884] [U] [ 179.645606][ T7884] [U] [ 179.646663][ T7884] [U] [ 179.647695][ T7884] [U] [ 179.648727][ T7884] [U] [ 179.649759][ T7884] [U] [ 179.650504][ T7884] [U] [ 179.651228][ T7884] [U] [ 179.651970][ T7884] [U] [ 179.652803][ T7884] [U] [ 179.653542][ T7884] [U] [ 179.654345][ T7884] [U] [ 179.655135][ T7884] [U] [ 179.655989][ T7884] [U] [ 179.656795][ T7884] [U] [ 179.657649][ T7884] [U] [ 179.658403][ T7884] [U] [ 179.659300][ T7884] [U] [ 179.660349][ T7884] [U] [ 179.661381][ T7884] [U] [ 179.662434][ T7884] [U] [ 179.663575][ T7884] [U] [ 179.664616][ T7884] [U] [ 179.665643][ T7884] [U] [ 179.666688][ T7884] [U] [ 179.667918][ T7884] [U] [ 179.668949][ T7884] [U] [ 179.669838][ T7884] [U] [ 179.670584][ T7884] [U] [ 179.671382][ T7884] [U] [ 179.672120][ T7884] [U] [ 179.672857][ T7884] [U] [ 179.673707][ T7884] [U] [ 179.674737][ T7884] [U] [ 179.675478][ T7884] [U] [ 179.676215][ T7884] [U] [ 179.676952][ T7884] [U] [ 179.678250][ T7884] [U] [ 179.679000][ T7884] [U] [ 179.679879][ T7884] [U] [ 179.680855][ T7884] [U] [ 179.683556][ T7884] [U] [ 179.684601][ T7884] [U] [ 179.685632][ T7884] [U] [ 179.686674][ T7884] [U] [ 179.687925][ T7884] [U] [ 179.688956][ T7884] [U] [ 179.689980][ T7884] [U] [ 179.690941][ T7884] [U] [ 179.691890][ T7884] [U] [ 179.692718][ T7884] [U] [ 179.693496][ T7884] [U] [ 179.694231][ T7884] [U] [ 179.696272][ T7884] [U] [ 179.697030][ T7884] [U] [ 179.697756][ T7884] [U] [ 179.698537][ T7884] [U] [ 179.700232][ T7884] [U] [ 179.701235][ T7884] [U] [ 179.702288][ T7884] [U] [ 179.703293][ T7884] [U] [ 179.706123][ T7884] [U] [ 179.707177][ T7884] [U] [ 179.708193][ T7884] [U] [ 180.171212][ T7883] [U] [ 181.847411][ T7912] kvm: pic: non byte write [ 182.002063][ T7919] binder: 7918:7919 ioctl 4018620d 0 returned -22 [ 182.149876][ T7927] block nbd2: not configured, cannot reconfigure [ 183.554936][ T7945] random: crng reseeded on system resumption [ 183.726015][ T7947] binder: 7946:7947 ioctl 4018620d 0 returned -22 [ 184.094475][ T7954] syzkaller0: entered promiscuous mode [ 184.095973][ T7954] syzkaller0: entered allmulticast mode [ 184.451170][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.695'. [ 184.457263][ T7952] netlink: 32 bytes leftover after parsing attributes in process `syz.1.695'. [ 186.487299][ T7981] binder: 7980:7981 ioctl 4018620d 0 returned -22 [ 188.010483][ T8004] input: syz1 as /devices/virtual/input/input11 [ 188.908571][ T8016] binder: 8015:8016 ioctl 4018620d 0 returned -22 [ 191.169738][ T8049] binder: 8047:8049 ioctl 4018620d 0 returned -22 [ 191.358830][ T8054] tmpfs: Unknown parameter 'Î ' [ 193.815023][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.942052][ T8085] binder: 8084:8085 ioctl 4018620d 0 returned -22 [ 196.383825][ T8110] nbd0: detected capacity change from 0 to 22 [ 196.425866][ T8111] block nbd0: shutting down sockets [ 196.440132][ C2] blk_print_req_error: 25 callbacks suppressed [ 196.440149][ C2] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.445372][ C2] buffer_io_error: 25 callbacks suppressed [ 196.445383][ C2] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.450085][ T2206] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.452689][ T2206] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.455923][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.458506][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.460869][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.463293][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.483862][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.486503][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.488567][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.490876][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.493087][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.495504][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.497734][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.500007][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.502011][ T7706] ldm_validate_partition_table(): Disk read failed. [ 196.503832][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.506093][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.508100][ T7706] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.510356][ T7706] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.512420][ T7706] Dev nbd0: unable to read RDB block 0 [ 196.517680][ T7706] nbd0: unable to read partition table [ 196.519242][ T7706] nbd0: partition table beyond EOD, truncated [ 196.551909][ T8112] ldm_validate_partition_table(): Disk read failed. [ 196.567483][ T8112] Dev nbd0: unable to read RDB block 0 [ 196.569852][ T8112] nbd0: unable to read partition table [ 196.571995][ T8112] nbd0: partition table beyond EOD, truncated [ 196.595878][ T7706] ldm_validate_partition_table(): Disk read failed. [ 196.597830][ T7706] Dev nbd0: unable to read RDB block 0 [ 196.599373][ T7706] nbd0: unable to read partition table [ 196.600870][ T7706] nbd0: partition table beyond EOD, truncated [ 197.471386][ T8122] binder: 8121:8122 ioctl 4018620d 0 returned -22 [ 200.427504][ T8181] binder: 8180:8181 ioctl 4018620d 0 returned -22 [ 200.777337][ T8187] overlayfs: overlapping lowerdir path [ 201.158386][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.757'. [ 201.161788][ T8189] IPVS: Error joining to the multicast group [ 201.602366][ T8199] kvm: pic: non byte write [ 203.097523][ T8210] binder: 8209:8210 ioctl 4018620d 0 returned -22 [ 204.529997][ T8230] kvm: pic: non byte write [ 205.933896][ T8250] kvm: pic: non byte write [ 206.870947][ T8259] binder: 8258:8259 ioctl 4018620d 0 returned -22 [ 207.389061][ T8264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.394551][ T8264] batadv_slave_0: entered promiscuous mode [ 208.650762][ T8271] kvm: pic: non byte write [ 208.830403][ T8291] binder: 8288:8291 ioctl 4018620d 0 returned -22 [ 208.853051][ T8283] kvm: pic: non byte write [ 209.645007][ T8303] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 209.647342][ T8303] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 209.650720][ T8303] vhci_hcd vhci_hcd.0: Device attached [ 209.749107][ T8306] overlay: Bad value for 'metacopy' [ 209.823862][ T5673] vhci_hcd: vhci_device speed not set [ 209.893742][ T5673] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 210.490233][ T8304] vhci_hcd: connection reset by peer [ 210.492592][ T1159] vhci_hcd: stop threads [ 210.493970][ T1159] vhci_hcd: release socket [ 210.495180][ T1159] vhci_hcd: disconnect device [ 211.576607][ T8320] binder: 8319:8320 ioctl 4018620d 0 returned -22 [ 212.058342][ T8326] kvm: pic: non byte write [ 214.076663][ T8350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.078902][ T8350] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 214.081494][ T8350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.083068][ T8350] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 214.178523][ T8384] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 214.182030][ T8384] trusted_key: encrypted_key: insufficient parameters specified [ 214.530820][ T8389] binder: 8388:8389 ioctl 4018620d 0 returned -22 [ 215.013833][ T5673] vhci_hcd: vhci_device speed not set [ 215.024650][ T8398] kvm: pic: non byte write [ 215.058891][ T8404] netlink: 156 bytes leftover after parsing attributes in process `syz.2.808'. [ 215.106527][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 215.108518][ T8404] netlink: 98 bytes leftover after parsing attributes in process `syz.2.808'. [ 215.172853][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 215.186172][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 215.611358][ T8416] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 215.853752][ T1289] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 215.910705][ T8418] fuse: Bad value for 'user_id' [ 215.912442][ T8418] fuse: Bad value for 'user_id' [ 215.919312][ T8418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.812'. [ 216.003786][ T1289] usb 5-1: Using ep0 maxpacket: 32 [ 216.005109][ T1289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.005132][ T1289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.005143][ T1289] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 216.005159][ T1289] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 216.005169][ T1289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.006190][ T1289] usb 5-1: config 0 descriptor?? [ 216.008285][ T1289] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 216.330856][ T8422] binder: 8421:8422 ioctl 4018620d 0 returned -22 [ 218.263782][ T57] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 218.425575][ T57] usb 6-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 218.428995][ T57] usb 6-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 218.431991][ T57] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 218.446451][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.467491][ T1289] usb 5-1: USB disconnect, device number 6 [ 218.675969][ T8445] serio: Serial port pts0 [ 218.678139][ T57] usb 6-1: language id specifier not provided by device, defaulting to English [ 218.761254][ T8443] kvm: pic: non byte write [ 218.943981][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 218.946427][ T8451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 219.157748][ T57] usb 6-1: USB disconnect, device number 6 [ 219.779983][ T8459] binder: 8453:8459 ioctl 4018620d 0 returned -22 [ 223.027286][ T8492] binder: 8491:8492 ioctl 4018620d 0 returned -22 [ 225.363766][ T8509] nbd2: detected capacity change from 0 to 12 [ 225.368312][ T7706] block nbd2: Send control failed (result -89) [ 225.370158][ T7706] block nbd2: Request send failed, requeueing [ 225.372261][ T5343] block nbd2: Receive control failed (result -32) [ 225.378698][ T6476] block nbd2: Dead connection, failed to find a fallback [ 225.380681][ T6476] block nbd2: shutting down sockets [ 225.382134][ T6476] blk_print_req_error: 41 callbacks suppressed [ 225.382144][ T6476] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.387105][ T6476] buffer_io_error: 41 callbacks suppressed [ 225.387113][ T6476] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.395983][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.398917][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.401532][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.404481][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.407559][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.410088][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.413589][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.420886][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.423177][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.426338][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.429766][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.432141][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.440282][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.442869][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.444924][ T7706] ldm_validate_partition_table(): Disk read failed. [ 225.457079][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.466584][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.468782][ T7706] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 225.471584][ T7706] Buffer I/O error on dev nbd2, logical block 0, async page read [ 225.475870][ T7706] Dev nbd2: unable to read RDB block 0 [ 225.480032][ T7706] nbd2: unable to read partition table [ 225.482288][ T7706] nbd2: partition table beyond EOD, truncated [ 225.500065][ T7706] ldm_validate_partition_table(): Disk read failed. [ 225.503203][ T7706] Dev nbd2: unable to read RDB block 0 [ 225.510457][ T7706] nbd2: unable to read partition table [ 225.512615][ T7706] nbd2: partition table beyond EOD, truncated [ 226.813756][ T8530] kvm: pic: non byte write [ 227.457090][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 228.886370][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 229.065478][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.068241][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.071420][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.076325][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.079680][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.094928][ T25] usb 6-1: config 0 descriptor?? [ 229.544251][ T25] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 229.546446][ T25] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 229.561025][ T25] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 230.761060][ T1289] usb 6-1: USB disconnect, device number 7 [ 232.911194][ T8589] ======================================================= [ 232.911194][ T8589] WARNING: The mand mount option has been deprecated and [ 232.911194][ T8589] and is ignored by this kernel. Remove the mand [ 232.911194][ T8589] option from the mount to silence this warning. [ 232.911194][ T8589] ======================================================= [ 233.536388][ T8601] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 233.541624][ T8601] PKCS7: Only support pkcs7_signedData type [ 234.161847][ T8603] kvm: pic: non byte write [ 234.382662][ T8610] netlink: 'syz.3.864': attribute type 13 has an invalid length. [ 234.390790][ T8610] netlink: 152 bytes leftover after parsing attributes in process `syz.3.864'. [ 237.545953][ T8643] vivid-002: ================= START STATUS ================= [ 237.549102][ T8643] vivid-002: Radio HW Seek Mode: Bounded [ 237.551348][ T8643] vivid-002: Radio Programmable HW Seek: false [ 237.553558][ T8643] vivid-002: RDS Rx I/O Mode: Block I/O [ 237.558204][ T8643] vivid-002: Generate RBDS Instead of RDS: false [ 237.560519][ T8643] vivid-002: RDS Reception: true [ 237.562199][ T8643] vivid-002: RDS Program Type: 0 inactive [ 237.565323][ T8643] vivid-002: RDS PS Name: inactive [ 237.576729][ T8643] vivid-002: RDS Radio Text: inactive [ 237.578667][ T8643] vivid-002: RDS Traffic Announcement: false inactive [ 237.581083][ T8643] vivid-002: RDS Traffic Program: false inactive [ 237.583399][ T8643] vivid-002: RDS Music: false inactive [ 237.593947][ T8643] vivid-002: ================== END STATUS ================== [ 238.335783][ T8652] IPVS: length: 20 != 8 [ 238.452200][ T8656] netlink: 32 bytes leftover after parsing attributes in process `syz.1.874'. [ 238.482500][ T8655] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 239.418286][ T8665] kvm: pic: non byte write [ 241.485948][ T8685] EXT4-fs warning (device sda1): ext4_group_extend:1870: need to use ext2online to resize further [ 244.014297][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 244.163787][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 244.175349][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.177749][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.181455][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.186904][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.190621][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.198329][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.200841][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.206401][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.210249][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.216907][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.221764][ T25] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 244.225891][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 244.229472][ T25] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 244.233529][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 244.238940][ T25] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 244.248480][ T25] usb 5-1: string descriptor 0 read error: -22 [ 244.250740][ T25] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 244.255728][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.305377][ T25] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 244.726332][ T65] usb 5-1: USB disconnect, device number 7 [ 244.732009][ T8718] adutux: No device or device unplugged -19 [ 244.738887][ T8719] adutux: No device or device unplugged -19 [ 245.795651][ T8722] kvm: pic: non byte write [ 247.364699][ T8758] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 247.390744][ T8758] syzkaller0: entered promiscuous mode [ 247.392254][ T8758] syzkaller0: entered allmulticast mode [ 250.668466][ T8796] random: crng reseeded on system resumption [ 250.679012][ T8796] Restarting kernel threads ... done. [ 251.351972][ T8794] delete_channel: no stack [ 251.813922][ T64] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 251.947789][ T64] usb 7-1: device descriptor read/64, error -71 [ 252.157146][ T8808] input: syz0 as /devices/virtual/input/input12 [ 252.213801][ T64] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 252.343890][ T64] usb 7-1: device descriptor read/64, error -71 [ 252.454134][ T64] usb usb7-port1: attempt power cycle [ 252.803829][ T64] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 252.824459][ T64] usb 7-1: device descriptor read/8, error -71 [ 253.073772][ T64] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 253.095090][ T64] usb 7-1: device descriptor read/8, error -71 [ 253.205596][ T64] usb usb7-port1: unable to enumerate USB device [ 254.294517][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.911'. [ 255.265058][ T1374] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.268099][ T1374] ================================================================== [ 255.270837][ T1374] BUG: KASAN: slab-use-after-free in tty_write_room+0x7d/0x90 [ 255.273351][ T1374] Read of size 8 at addr ffff888012505020 by task aoe_tx0/1374 [ 255.277546][ T1374] [ 255.278927][ T1374] CPU: 2 UID: 0 PID: 1374 Comm: aoe_tx0 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 255.282487][ T1374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.286001][ T1374] Call Trace: [ 255.287125][ T1374] [ 255.288129][ T1374] dump_stack_lvl+0x116/0x1f0 [ 255.289775][ T1374] print_report+0xc3/0x620 [ 255.291351][ T1374] ? __virt_addr_valid+0x5e/0x590 [ 255.293089][ T1374] ? __phys_addr+0xc6/0x150 [ 255.294702][ T1374] kasan_report+0xd9/0x110 [ 255.296229][ T1374] ? tty_write_room+0x7d/0x90 [ 255.297790][ T1374] ? tty_write_room+0x7d/0x90 [ 255.299363][ T1374] tty_write_room+0x7d/0x90 [ 255.300911][ T1374] handle_tx+0x151/0x630 [ 255.302405][ T1374] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.304338][ T1374] dev_hard_start_xmit+0x143/0x790 [ 255.306042][ T1374] __dev_queue_xmit+0x7c7/0x4350 [ 255.307643][ T1374] ? __pfx___dev_queue_xmit+0x10/0x10 [ 255.309515][ T1374] ? __pfx___lock_acquire+0x10/0x10 [ 255.311222][ T1374] ? __pfx___lock_acquire+0x10/0x10 [ 255.313032][ T1374] ? lock_acquire.part.0+0x11b/0x380 [ 255.314917][ T1374] ? find_held_lock+0x2d/0x110 [ 255.316617][ T1374] ? find_held_lock+0x2d/0x110 [ 255.318301][ T1374] ? tx+0xa8/0x190 [ 255.319639][ T1374] ? __pfx_lock_release+0x10/0x10 [ 255.321291][ T1374] ? lock_acquire+0x2f/0xb0 [ 255.322715][ T1374] tx+0xcc/0x190 [ 255.323949][ T1374] ? __pfx_tx+0x10/0x10 [ 255.325338][ T1374] kthread+0x1e7/0x3c0 [ 255.326769][ T1374] ? __pfx_kthread+0x10/0x10 [ 255.328409][ T1374] ? __pfx_default_wake_function+0x10/0x10 [ 255.330460][ T1374] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.332306][ T1374] ? __kthread_parkme+0x148/0x220 [ 255.334060][ T1374] ? __pfx_kthread+0x10/0x10 [ 255.335664][ T1374] kthread+0x2c1/0x3a0 [ 255.337033][ T1374] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.338732][ T1374] ? __pfx_kthread+0x10/0x10 [ 255.340272][ T1374] ret_from_fork+0x45/0x80 [ 255.341753][ T1374] ? __pfx_kthread+0x10/0x10 [ 255.343379][ T1374] ret_from_fork_asm+0x1a/0x30 [ 255.345063][ T1374] [ 255.346180][ T1374] [ 255.347035][ T1374] Allocated by task 8838: [ 255.348526][ T1374] kasan_save_stack+0x33/0x60 [ 255.350206][ T1374] kasan_save_track+0x14/0x30 [ 255.351872][ T1374] __kasan_kmalloc+0xaa/0xb0 [ 255.353500][ T1374] alloc_tty_struct+0x98/0x8d0 [ 255.355184][ T1374] tty_init_dev.part.0+0x1e/0x660 [ 255.356976][ T1374] tty_init_dev+0x60/0x80 [ 255.356998][ T1374] ptmx_open+0x104/0x350 [ 255.357013][ T1374] chrdev_open+0x237/0x6a0 [ 255.357030][ T1374] do_dentry_open+0x6ca/0x1530 [ 255.357044][ T1374] vfs_open+0x82/0x3f0 [ 255.357060][ T1374] path_openat+0x1e6a/0x2d60 [ 255.357074][ T1374] do_filp_open+0x1dc/0x430 [ 255.357089][ T1374] do_sys_openat2+0x17a/0x1e0 [ 255.357108][ T1374] __ia32_compat_sys_openat+0x16e/0x210 [ 255.357129][ T1374] __do_fast_syscall_32+0x73/0x120 [ 255.357151][ T1374] do_fast_syscall_32+0x32/0x80 [ 255.357171][ T1374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.357194][ T1374] [ 255.357198][ T1374] Freed by task 25: [ 255.357205][ T1374] kasan_save_stack+0x33/0x60 [ 255.357223][ T1374] kasan_save_track+0x14/0x30 [ 255.357241][ T1374] kasan_save_free_info+0x3b/0x60 [ 255.357256][ T1374] __kasan_slab_free+0x51/0x70 [ 255.357274][ T1374] kfree+0x14f/0x4b0 [ 255.357291][ T1374] process_one_work+0x958/0x1b30 [ 255.357314][ T1374] worker_thread+0x6c8/0xf00 [ 255.357335][ T1374] kthread+0x2c1/0x3a0 [ 255.357350][ T1374] ret_from_fork+0x45/0x80 [ 255.357364][ T1374] ret_from_fork_asm+0x1a/0x30 [ 255.357386][ T1374] [ 255.357389][ T1374] Last potentially related work creation: [ 255.357394][ T1374] kasan_save_stack+0x33/0x60 [ 255.357411][ T1374] __kasan_record_aux_stack+0xba/0xd0 [ 255.357424][ T1374] insert_work+0x36/0x230 [ 255.357448][ T1374] __queue_work+0x97e/0x1080 [ 255.357468][ T1374] queue_work_on+0x11a/0x140 [ 255.357487][ T1374] release_tty+0x4de/0x5d0 [ 255.357503][ T1374] tty_release_struct+0xb7/0xe0 [ 255.357520][ T1374] tty_release+0xe25/0x1410 [ 255.357537][ T1374] __fput+0x3f6/0xb60 [ 255.357554][ T1374] task_work_run+0x14e/0x250 [ 255.357572][ T1374] syscall_exit_to_user_mode+0x27b/0x2a0 [ 255.357591][ T1374] __do_fast_syscall_32+0x80/0x120 [ 255.357610][ T1374] do_fast_syscall_32+0x32/0x80 [ 255.357648][ T1374] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.357668][ T1374] [ 255.357672][ T1374] The buggy address belongs to the object at ffff888012505000 [ 255.357672][ T1374] which belongs to the cache kmalloc-cg-2k of size 2048 [ 255.357684][ T1374] The buggy address is located 32 bytes inside of [ 255.357684][ T1374] freed 2048-byte region [ffff888012505000, ffff888012505800) [ 255.357699][ T1374] [ 255.357702][ T1374] The buggy address belongs to the physical page: [ 255.357708][ T1374] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12500 [ 255.357722][ T1374] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 255.357734][ T1374] memcg:ffff88801ed0b501 [ 255.357740][ T1374] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 255.357754][ T1374] page_type: f5(slab) [ 255.357768][ T1374] raw: 00fff00000000040 ffff88801ac50140 0000000000000000 dead000000000001 [ 255.357783][ T1374] raw: 0000000000000000 0000000000080008 00000001f5000000 ffff88801ed0b501 [ 255.357797][ T1374] head: 00fff00000000040 ffff88801ac50140 0000000000000000 dead000000000001 [ 255.357810][ T1374] head: 0000000000000000 0000000000080008 00000001f5000000 ffff88801ed0b501 [ 255.357825][ T1374] head: 00fff00000000003 ffffea0000494001 ffffffffffffffff 0000000000000000 [ 255.357838][ T1374] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 255.357847][ T1374] page dumped because: kasan: bad access detected [ 255.357854][ T1374] page_owner tracks the page as allocated [ 255.357859][ T1374] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6036, tgid 6036 (syz-executor), ts 91652548047, free_ts 91644456316 [ 255.357885][ T1374] post_alloc_hook+0x2d1/0x350 [ 255.357903][ T1374] get_page_from_freelist+0x101e/0x3070 [ 255.357923][ T1374] __alloc_pages_noprof+0x223/0x25a0 [ 255.357942][ T1374] alloc_pages_mpol_noprof+0x2c9/0x610 [ 255.357963][ T1374] new_slab+0x2ba/0x3f0 [ 255.357978][ T1374] ___slab_alloc+0xd1d/0x16f0 [ 255.357994][ T1374] __slab_alloc.constprop.0+0x56/0xb0 [ 255.358010][ T1374] __kmalloc_node_track_caller_noprof+0x365/0x440 [ 255.358031][ T1374] kmemdup_noprof+0x29/0x60 [ 255.358049][ T1374] neigh_sysctl_register+0xb3/0x640 [ 255.358067][ T1374] addrconf_sysctl_register+0xb9/0x1f0 [ 255.358082][ T1374] ipv6_add_dev+0xa1a/0x13e0 [ 255.358096][ T1374] addrconf_notify+0x53e/0x19c0 [ 255.358113][ T1374] notifier_call_chain+0xb9/0x410 [ 255.358128][ T1374] call_netdevice_notifiers_info+0xbe/0x140 [ 255.358143][ T1374] register_netdevice+0x1728/0x1e20 [ 255.358163][ T1374] page last free pid 6036 tgid 6036 stack trace: [ 255.358171][ T1374] free_unref_page+0x5f4/0xdc0 [ 255.358189][ T1374] __put_partials+0x14c/0x170 [ 255.358206][ T1374] qlist_free_all+0x4e/0x120 [ 255.358221][ T1374] kasan_quarantine_reduce+0x192/0x1e0 [ 255.358239][ T1374] __kasan_slab_alloc+0x69/0x90 [ 255.358257][ T1374] __kmalloc_cache_noprof+0x11e/0x310 [ 255.358273][ T1374] kobject_uevent_env+0x265/0x1670 [ 255.358289][ T1374] __kobject_del+0x168/0x1f0 [ 255.358309][ T1374] kobject_put+0x327/0x5a0 [ 255.358328][ T1374] net_rx_queue_update_kobjects+0x478/0x5f0 [ 255.358347][ T1374] netif_set_real_num_rx_queues+0x169/0x210 [ 255.358361][ T1374] veth_init_queues+0x151/0x190 [ 255.358381][ T1374] veth_newlink+0x54c/0x9e0 [ 255.358400][ T1374] __rtnl_newlink+0x119c/0x1920 [ 255.358419][ T1374] rtnl_newlink+0x67/0xa0 [ 255.358438][ T1374] rtnetlink_rcv_msg+0x3c7/0xea0 [ 255.358464][ T1374] [ 255.358468][ T1374] Memory state around the buggy address: [ 255.358476][ T1374] ffff888012504f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.358486][ T1374] ffff888012504f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 255.358497][ T1374] >ffff888012505000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.358504][ T1374] ^ [ 255.358512][ T1374] ffff888012505080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.358522][ T1374] ffff888012505100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 255.358531][ T1374] ================================================================== [ 255.358816][ T1374] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.358828][ T1374] CPU: 2 UID: 0 PID: 1374 Comm: aoe_tx0 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 255.358846][ T1374] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 255.358855][ T1374] Call Trace: [ 255.358861][ T1374] [ 255.358867][ T1374] dump_stack_lvl+0x3d/0x1f0 [ 255.358890][ T1374] panic+0x71d/0x800 [ 255.358910][ T1374] ? __pfx_panic+0x10/0x10 [ 255.358933][ T1374] ? check_panic_on_warn+0x1f/0xb0 [ 255.358954][ T1374] check_panic_on_warn+0xab/0xb0 [ 255.358974][ T1374] end_report+0x117/0x180 [ 255.358993][ T1374] kasan_report+0xe9/0x110 [ 255.359012][ T1374] ? tty_write_room+0x7d/0x90 [ 255.359027][ T1374] ? tty_write_room+0x7d/0x90 [ 255.359044][ T1374] tty_write_room+0x7d/0x90 [ 255.359059][ T1374] handle_tx+0x151/0x630 [ 255.359076][ T1374] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.359096][ T1374] dev_hard_start_xmit+0x143/0x790 [ 255.359116][ T1374] __dev_queue_xmit+0x7c7/0x4350 [ 255.359138][ T1374] ? __pfx___dev_queue_xmit+0x10/0x10 [ 255.359154][ T1374] ? __pfx___lock_acquire+0x10/0x10 [ 255.359177][ T1374] ? __pfx___lock_acquire+0x10/0x10 [ 255.359199][ T1374] ? lock_acquire.part.0+0x11b/0x380 [ 255.359220][ T1374] ? find_held_lock+0x2d/0x110 [ 255.359238][ T1374] ? find_held_lock+0x2d/0x110 [ 255.359256][ T1374] ? tx+0xa8/0x190 [ 255.359270][ T1374] ? __pfx_lock_release+0x10/0x10 [ 255.359291][ T1374] ? lock_acquire+0x2f/0xb0 [ 255.359315][ T1374] tx+0xcc/0x190 [ 255.359329][ T1374] ? __pfx_tx+0x10/0x10 [ 255.359343][ T1374] kthread+0x1e7/0x3c0 [ 255.359365][ T1374] ? __pfx_kthread+0x10/0x10 [ 255.359385][ T1374] ? __pfx_default_wake_function+0x10/0x10 [ 255.359408][ T1374] ? lockdep_hardirqs_on+0x7c/0x110 [ 255.359427][ T1374] ? __kthread_parkme+0x148/0x220 [ 255.359452][ T1374] ? __pfx_kthread+0x10/0x10 [ 255.359472][ T1374] kthread+0x2c1/0x3a0 [ 255.359487][ T1374] ? _raw_spin_unlock_irq+0x23/0x50 [ 255.359504][ T1374] ? __pfx_kthread+0x10/0x10 [ 255.359520][ T1374] ret_from_fork+0x45/0x80 [ 255.359534][ T1374] ? __pfx_kthread+0x10/0x10 [ 255.359550][ T1374] ret_from_fork_asm+0x1a/0x30 [ 255.359575][ T1374] [ 255.360170][ T1374] Kernel Offset: disabled VM DIAGNOSIS: 14:34:24 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff888029b52a28 RCX=ffffffff81ae4daa RDX=0000000000000000 RSI=ffffffff8bb122a0 RDI=ffffffff8d81ab80 RBP=0000000000000001 RSP=ffffc900242f7858 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffffff9a39d2a8 R13=ffff888012b63de8 R14=ffff888012b63dd0 R15=ffff888012b63e10 RIP=ffffffff81ae4f3f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f54e1da4 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d800000000 0000000300000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000d800000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000dea547 RBX=0000000000000001 RCX=ffffffff8b131a39 RDX=0000000000000000 RSI=ffffffff8b4cc8e0 RDI=ffffffff8bb12320 RBP=ffffed10036e9910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed10056a7025 R10=ffff88802b53812b R11=0000000000000000 R12=0000000000000001 R13=ffff88801b74c880 R14=ffffffff901cd748 R15=0000000000000000 RIP=ffffffff8b132e1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5689ead5e8 CR3=000000004c222000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c4c0c004 Opmask01=0000000000000000 Opmask02=0000000011000303 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020262620003a25 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000069622f72 73752f3a6e69622f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff0f0e0d0c 0b0a090807060504 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020262620003a25 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6463706368642f 6e75722f7261762f 0000564635ac0dc0 0000564635ac0e10 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056463500662d 0000564635ac0da8 0000564635ac0dc8 665f65676e006d72 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85037bc5 RDI=ffffffff9a63c220 RBP=ffffffff9a63c1e0 RSP=ffffc90007d6f478 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000031 R14=ffffffff85037b60 R15=0000000000000000 RIP=ffffffff85037bef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff8ba1c9440 CR3=0000000059f7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88802b6467c0 RCX=ffffffff8180abcc RDX=ffff888024cc4880 RSI=ffffffff8180aba6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006fb79a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056c8cf9 R13=0000000000000001 R14=ffff88802b6467c8 R15=ffff88802b740100 RIP=ffffffff8180aba8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000564635abb131 CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001b800000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000